Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91D087E/B019F1CA04FC11EA8CAED415C4F9AE02/8H-xPvkeIhGw_ryFWt2vMBsGcaQ.mft
File:                     8H-xPvkeIhGw_ryFWt2vMBsGcaQ.mft (raw, json)
Hash identifier:          BKC33zY68G9GmTxaNiULMfVFLG0iXHF1v3RCNcP0ZxU=
Subject key identifier:   24:46:F0:B3:4B:02:DD:4B:9F:B3:2A:0B:F4:5A:AE:28:4C:3E:51:8B
Authority key identifier: F0:7F:B1:3E:F9:1E:22:11:B0:FE:BC:85:5A:DD:AF:30:1B:06:71:A4
Certificate issuer:       /CN=A91D087E/serialNumber=F07FB13EF91E2211B0FEBC855ADDAF301B0671A4
Certificate serial:       0D5D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8H-xPvkeIhGw_ryFWt2vMBsGcaQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D087E/B019F1CA04FC11EA8CAED415C4F9AE02/8H-xPvkeIhGw_ryFWt2vMBsGcaQ.mft
Manifest number:          0D52
Signing time:             Wed 14 Oct 2026 18:15:39 +0000
Manifest this update:     Wed 14 Oct 2026 18:15:39 +0000
Manifest next update:     Wed 21 Oct 2026 18:15:39 +0000
Files and hashes:         1: 8H-xPvkeIhGw_ryFWt2vMBsGcaQ.crl (hash: EL+gAVBF34WEAuublZddDwePTO9+0TpYQPRNu2cIrKI=)
                          2: 8A7C342604FE11EAB778E81CC4F9AE02.roa (hash: h96ygBqP1HseQXwwUH62n5eNi2bKC3tu8QpUrxfOlvo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D087E/B019F1CA04FC11EA8CAED415C4F9AE02/8H-xPvkeIhGw_ryFWt2vMBsGcaQ.crl
                          rsync://rpki.apnic.net/member_repository/A91D087E/B019F1CA04FC11EA8CAED415C4F9AE02/8H-xPvkeIhGw_ryFWt2vMBsGcaQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8H-xPvkeIhGw_ryFWt2vMBsGcaQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 21 Oct 2026 18:15:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3421 (0xd5d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D087E, serialNumber=F07FB13EF91E2211B0FEBC855ADDAF301B0671A4
        Validity
            Not Before: Oct 14 18:15:39 2026 GMT
            Not After : Oct 21 18:15:39 2026 GMT
        Subject: CN=6acfc6cb-0ac4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:b7:fd:55:33:69:0a:d8:22:07:90:8d:60:4e:
                    87:a0:81:5c:db:d7:01:57:f7:38:94:59:df:f2:70:
                    9b:17:64:6e:0c:f9:5a:2d:8d:ee:04:8f:72:93:c3:
                    26:46:af:7a:7b:c4:95:a7:e8:d3:f8:bc:12:06:3c:
                    b8:02:9a:ee:d9:5c:6b:7a:ef:5e:4d:63:38:34:cb:
                    e4:d3:28:c5:46:6d:7e:0d:74:41:c3:20:a5:18:5a:
                    90:b9:12:36:88:10:a4:8e:22:60:44:0f:20:c8:0a:
                    f8:23:6b:d2:37:06:ad:f3:0a:66:84:b2:ca:81:ed:
                    e4:76:f4:81:35:dc:e5:1c:98:b0:9e:d7:42:45:a5:
                    cc:f9:c2:a0:fc:b7:eb:41:e1:ab:73:ec:a7:50:f8:
                    c8:b9:e4:11:01:10:17:18:90:19:23:12:d9:1c:84:
                    88:a9:5d:df:7a:86:9f:03:fb:d6:21:67:4b:b0:8b:
                    c6:43:df:db:4f:46:12:4e:73:f9:42:21:2b:84:02:
                    d5:1a:36:11:79:e2:41:0b:83:97:c1:0e:cf:c3:48:
                    8b:f5:85:81:71:e9:c9:df:b9:c2:ea:9a:da:57:dc:
                    59:29:0c:00:f2:a2:66:e1:3c:75:37:df:3d:8f:dc:
                    b8:7e:3c:f8:21:91:10:2a:9b:df:1b:42:62:b2:7b:
                    dc:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:46:F0:B3:4B:02:DD:4B:9F:B3:2A:0B:F4:5A:AE:28:4C:3E:51:8B
            X509v3 Authority Key Identifier:
                keyid:F0:7F:B1:3E:F9:1E:22:11:B0:FE:BC:85:5A:DD:AF:30:1B:06:71:A4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D087E/B019F1CA04FC11EA8CAED415C4F9AE02/8H-xPvkeIhGw_ryFWt2vMBsGcaQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8H-xPvkeIhGw_ryFWt2vMBsGcaQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D087E/B019F1CA04FC11EA8CAED415C4F9AE02/8H-xPvkeIhGw_ryFWt2vMBsGcaQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ac:1f:1a:08:d2:bd:56:08:61:5d:5d:7b:52:77:f5:c2:c6:0a:
         a6:d2:d5:c3:7b:27:5b:51:18:b9:82:5a:b6:85:49:5a:38:be:
         01:0a:52:4a:a2:aa:8b:50:9f:f0:05:70:f9:f7:04:4e:cc:d5:
         b3:9c:09:68:06:e5:5c:49:65:bb:66:a2:50:22:67:6e:20:7f:
         91:7d:aa:70:ce:4e:85:87:bf:fc:1d:4e:06:5b:ba:f1:01:42:
         a3:6f:6d:84:e8:da:f8:46:5a:93:f5:e2:c6:b2:ae:27:67:8d:
         53:eb:cd:d4:ae:c5:75:cd:73:02:36:16:7c:6c:8f:59:f6:e1:
         c3:99:a7:4c:4f:a4:ab:66:3e:35:0f:68:94:15:58:1d:01:e5:
         87:60:a9:85:9e:cb:e0:96:90:4b:2a:7d:b9:aa:c7:57:c2:d3:
         e5:a9:28:b2:6b:27:7f:4d:09:c8:0e:e6:45:87:91:5a:24:bb:
         32:93:ba:ab:0e:c1:fd:51:1e:a2:e8:68:72:84:15:55:55:23:
         32:4a:94:15:71:8f:b9:f7:54:76:ba:3f:15:be:48:87:81:4d:
         e9:16:41:91:01:93:a4:15:7d:e4:99:10:74:76:c7:e0:ad:c1:
         f2:79:e0:bd:02:84:01:df:9e:07:f3:d8:3b:f2:00:ce:a2:a6:
         7b:45:f1:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 16 04:09:29 2026 by rpki-client